PT-2026-82181

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto qce component where the error path in the devm qce register algs function is handled incorrectly. If the ops-register algs function fails, the system...

PT-2026-82114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firewire OHCI driver where a NULL pointer dereference can occur within the ar context release function. This happens during the error handling path of the driver's...

The vulnerability of the mlx5e_skb_from_cqe_mpwrq_nonlinear() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rx.c driver of the Mellanox Ethernet network adapter for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098795 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/vmwpvrdma: Fix double free on pvrdmaallocucontext error path Sashiko points out that...

Linux Distros Unpatched Vulnerability : CVE-2026-80529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098896 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098878 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to alloca...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098915 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098702 advisory. In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause...

Linux Distros Unpatched Vulnerability : CVE-2026-65927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than t...

UBUNTU-CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

An off-by-one error in the RewriteValve of Apache Tomcat affecting the [N] flag causes rewrite processing to restart at the second rule rather than the first, which may bypass access control . Affected versions include 11.0.0-M1 through 11.0.24 , 10.1.0-M1 through 10.1.57 , 9.0.0-M1 through 9.0.1...

CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79148

An off-by-one error in the DevTools component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted Chrome extension, to read memory inside the sandbox . Chromium rated this Low severity, while the CNA-assigned CVSS 3.1 score is 9.1...

GHSA-XQQH-3W52-Q8P7 Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wx95-c6cv-8532. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method,...

CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...